Manager IAM Architecture

PTSI Prudential Technology and Services India Private Limited; India; On-site; INR 400,000 - 900,000; Full time

Job summary

Prudential seeks an IAM Security Assurance Architect to review new applications, platforms and cloud services against baseline IAM security requirements before go-live. You will also design automation for continuous assurance and manage remediation tracking across delivery teams.

The role partners with application, engineering, cloud and risk teams to embed security-by-design and ensure strong identity and access controls throughout the lifecycle.

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field.
• 8+ years of information security, with 5+ years in IAM-focused work.
• Hands-on automation for control validation and evidence collection.
• Experience integrating assurance checks with IAM and security tooling.
• Experience engaging with delivery, engineering, risk and audit stakeholders.

Responsibilities

• IAM security review authority for new apps, platforms, cloud workloads and changes.
• Design and build automation for continuous IAM assurance and evidence collection.
• Remediation tracking and risk reporting to IAM leadership.
• Collaborate with application, engineering, cloud, and change teams on secure-by-design delivery.

Skills

IAM reviews

IGA / SailPoint

Entra ID / AD

Privileged access

Federation protocols

Automation scripting

Security analytics

Stakeholder engagement

Education

Bachelor's degree in CS / InfoSec

Tools

SailPoint IdentityIQ

Microsoft Entra ID

Active Directory

CyberArk Privileged Access

OIDC / OAuth / SAML

Cloud CIEM (Azure/AWS/GCP)

PowerShell / Python

Job description

Prudential’s purpose is to be partners for every life and protectors for every future. Our purpose encourages everything we do by creating a culture in which diversity is celebrated and inclusion assured, for our people, customers, and partners. We provide a platform for our people to do their best work and make an impact to the business, and we support our people’s career ambitions. We pledge to make Prudential a place where you can Connect, Grow, and Succeed. The IAM Security Assurance Architect is responsible for reviewing all new applications, platforms, cloud services, and technology changes to ensure they meet the organisation’s baseline IAM security requirements before they go live. The role acts as the IAM security review authority within technology delivery and change processes, and builds the automation needed to provide continuous assurance that identity and access controls remain effective throughout the application lifecycle. The focus is on two outcomes: rigorous security reviews and automated, always-on assurance.

Key Responsibilities

1. 1. IAM Security Reviews Serve as the IAM security review authority for new applications, technology platforms, cloud workloads, and infrastructure changes. Review designs and change requests through project lifecycle and design checkpoint governance processes. Assess and approve applications against baseline IAM security requirements, including: Authentication standards MFA requirements Privileged access controls Role-based access models Segregation of Duties requirements Identity lifecycle (joiner / mover / leaver) requirements Account provisioning and deprovisioning controls Service account and non-human identity management standards Federation and Single Sign-On requirements Review application access models, role structures, entitlement designs, and access matrices. Classify application criticality and confirm IAM onboarding requirements are met. Identify security risks, control gaps, and remediation actions, and confirm closure before deployment. Provide clear, documented review decisions and risk-based approvals to delivery teams.
2. 2. Assurance Automation & Continuous Compliance Design and build automation that continuously validates whether applications and platforms meet baseline IAM security requirements. Automate evidence collection and control checks to reduce manual review effort and provide always-on assurance. Establish automated, continuous monitoring for: Orphaned accounts Stale and dormant identities Excessive or unused privileges Toxic access combinations Service account and non-human identity risks Privileged account misuse Deviations from approved access baselines Integrate assurance checks with IAM platforms and security tooling (e.g., SailPoint, Entra ID, Active Directory, CyberArk, cloud CIEM). Define Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and IAM assurance health metrics. Build and maintain dashboards that surface control effectiveness and non-compliance for remediation. Drive an automate-first approach to control validation, minimising point-in-time manual checks.
3. 3. Remediation, Risk & Reporting Track and drive closure of IAM security review findings and assurance exceptions. Review IAM-related risk assessments, exceptions, and remediation plans. Support internal and external audits with review evidence and assurance data. Report on review throughput, control coverage, and residual risk to IAM leadership.
4. 4. Stakeholder Engagement Partner with application, engineering, cloud, and change teams to embed security-by-design in delivery. Advise project teams on how to meet baseline IAM requirements early in the lifecycle. Collaborate with Security, Risk, and Audit functions on assurance outcomes and control gaps.

Key Deliverables

• IAM Security Review Decisions & Risk-Based Approvals
• Baseline IAM Requirement Assessments for New Applications
• Continuous Assurance Automation & Control Validation Framework
• Automated Evidence Collection & Compliance Checks
• IAM Assurance Dashboards & Metrics (KRIs / KPIs)
• Review Findings, Remediation Tracking & Exception Reviews
• Assurance Reporting for IAM Leadership and Audit

Skills & Experience

• Identity Governance & Administration (IGA) – SailPoint ISC / IdentityIQ
• Microsoft Entra ID and Active Directory
• CyberArk Privileged Access Management
• Authentication & Federation Protocols (OIDC, OAuth 2.0, SAML)
• Cloud Identity Security and CIEM (Azure, AWS, GCP)
• Service Account and Non-Human Identity Management
• IAM Automation, Scripting and Orchestration (e.g., Power Automate, Python, APIs)
• Security Analytics, Monitoring and Continuous Assurance Tooling
• Baseline IAM Security Requirements and Control Testing
• Review & Assurance Capability
• Security design review and change assessment processes
• Secure-by-design and baseline requirement validation
• Automated control testing and evidence collection
• Technology risk assessment and remediation tracking
• Metrics, KRI/KPI definition and assurance reporting
• Audit support and control effectiveness validation

Professional Experience

• Experience performing IAM or security design reviews for applications and platforms.
• Experience assessing applications against baseline IAM / access control requirements.
• Experience building automation for control validation, evidence collection, or continuous assurance.
• Experience integrating assurance checks with IAM and security tooling.
• Experience tracking and driving remediation of identity and access control gaps.
• Experience engaging with delivery, engineering, risk, and audit stakeholders.

Qualifications & Certifications

Experience Bachelor's degree in Computer Science, Information Security, Engineering, or a related field (or equivalent practical experience). 8+ years of overall experience in information security or IT, with 5+ years focused on Identity & Access Management. 3+ years performing IAM / security design reviews or control assurance for applications and platforms. Demonstrated hands-on experience building automation for control validation, evidence collection, or continuous assurance.

• One or more of the following certifications is preferred: CISSP – Certified Information Systems Security Professional
• CISM – Certified Information Security Manager
• CIAM / Identity certifications (e.g., SailPoint, Okta, Microsoft Entra / Identity & Access Administrator SC-300)
• CyberArk Defender / Sentry (Privileged Access Management)
• Cloud security certifications (e.g., AWS Certified Security – Specialty, Microsoft SC-100 / AZ-500, GCP Professional Cloud Security Engineer)
• CCSP – Certified Cloud Security Professional
• CISA – Certified Information Systems Auditor (for controls assurance and audit alignment)

Prudential is an equal opportunity employer. We provide equality of opportunity of benefits for all who apply and who perform work for our organisation irrespective of sex, race, age, ethnic origin, educational, social and cultural background, marital status, pregnancy and maternity, religion or belief, disability or part-time / fixed-term work, or any other status protected by applicable law. We encourage the same standards from our recruitment and third-party suppliers taking into account the context of grade, job and location. We also allow for reasonable adjustments to support people with individual physical or mental health requirements.

We are Prudential. For every life, we are partners. For every future, we are protectors. Prudential plc provides life and health insurance and asset management to 17 million customers across 20 markets in Asia and Africa. We are headquartered in Hong Kong and have dual primary listings on the Stock Exchange of Hong Kong and the London Stock Exchange. We are focused on four strategic regions: Greater China, ASEAN, India and Africa. Our customers are served by around 55,000 agents and more than 200 bank partners. Prudential plc is not affiliated in any manner with Prudential Financial, Inc., a company whose principal place of business is in the United States of America or with the Prudential Assurance Company, a subsidiary of M&G plc, a company incorporated in the United Kingdom. Find out more at www.prudentialplc.com Follow us on LinkedIn